PT-2021-23861 · Mozilla+4 · Firefox+4

Jake Heath · Published 2021-12-07 · Updated 2024-12-12 · CVE-2021-43540

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 95

Description The issue allows WebExtensions with the correct permissions to create and install ServiceWorkers for third-party websites. These ServiceWorkers would not be uninstalled when the extension is removed.

Recommendations For versions prior to 95, update to version 95 or later to resolve the issue.

Exploit

Fix

Related Identifiers

ALT-PU-2021-3496

ALT-PU-2021-3576

ALT-PU-2022-2458

ALT-PU-2022-2929

ALT-PU-2023-1138

ALT-PU-2023-1139

ALT-PU-2023-4336

ALT-PU-2023-4339

CVE-2021-43540

OESA-2023-1673

OESA-2023-1674

OPENSUSE-SU-2024:11669-1

OPENSUSE-SU-2024:14572-1

USN-5186-1

USN-5186-2

Affected Products

Alt Linux

Astra Linux

Firefox

Linuxmint

Ubuntu

References · 2185

• 🔥 https://github.com/mistymntncop/CVE-2022-1802 · Exploit
• 🔥 https://github.com/0vercl0k/CVE-2022-28281 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-26485 · Exploit
• 🔥❌ https://github.com/MagicPwnrin/CVE-2022-28282 · Exploit, Deleted
• 🔥❌ https://github.com/Pwnrin/CVE-2022-28282 · Exploit, Deleted
• https://nvd.nist.gov/vuln/detail/CVE-2023-29535 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-45418 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-23965 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-15673 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-22756 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-29985 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-26969 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-22745 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2022-22742 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-32213 · Security Note